Privacy Policy
Last updated: 10 November 2026
This policy explains what personal data Fried Studios collects when you visit friedstudios.com, get in touch with us or work with us, why we collect it, and what rights you have over it. We’ve tried to keep it short and in plain English.
1. Who we are
Fried Studios is a brand design and marketing studio based in Valencia, Spain. The data controller responsible for your personal data is:
- Name:Fried Studios S.L.
- NIF: [NIF]
- Address: [POSTAL ADDRESS], Valencia, Spain
- Email: hi@friedstudios.com
For anything relating to this policy or your data, email us at the address above.
2. What we collect and why
When you contact us
If you email us, message us on WhatsApp, or book a call through Calendly, we receive your name, contact details and whatever you choose to tell us about your business or project. We use this to reply, to prepare for and hold the call, and to send you a proposal if you ask for one.
Legal basis: taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to business enquiries (Art. 6(1)(f) GDPR).
When you become a client
We process the contact and billing details of you and your team, project communications, and the materials you share with us so we can deliver the work. We also issue and keep invoices.
Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR) and compliance with Spanish tax and accounting obligations (Art. 6(1)(c) GDPR).
When you browse the website
With your consent, we use Google Analytics to understand how many people visit the site and which pages they look at. This uses cookies and collects information such as pages viewed, approximate location (country/city), device and browser type, and how you arrived at the site. We don’t use it to identify you personally. Our hosting provider also keeps standard server logs (such as IP address and time of request) for security purposes.
Legal basis: your consent for analytics and marketing cookies (Art. 6(1)(a) GDPR and Art. 22.2 LSSI), which you can withdraw at any time, and our legitimate interest in keeping the site secure for server logs. See our Cookie Policy for details.
We don’t sell your data, and we don’t use it for automated decision-making or profiling.
3. Who we share it with
We only share personal data with service providers who help us run the studio, and only as far as they need it. These include:
- Calendly (call scheduling)
- WhatsApp / Meta (messaging, if you contact us that way)
- Google Workspace (email and file storage)
- Google (website analytics, only if you accept analytics cookies)
- Hostinger (website hosting)
- Our accountant/gestor and tax-filing platform, for invoicing and tax compliance
We may also disclose data where the law requires it, for example to the Spanish tax authority (Agencia Tributaria).
4. International transfers
Some of these providers are based in, or store data in, the United States. Where that happens, transfers are covered by the EU–US Data Privacy Framework or by the European Commission’s Standard Contractual Clauses, so your data keeps an equivalent level of protection.
5. How long we keep it
- Enquiries that don’t go further: up to 12 months after our last contact, then deleted.
- Client records and project correspondence: for the length of our working relationship, then for as long as needed to handle any claims.
- Invoices and accounting records: for the periods required by Spanish tax and commercial law (generally up to six years).
- Analytics data: retained in Google Analytics for 14 MONTHS.
6. Your rights
You have the right to access the personal data we hold about you, have it corrected or deleted, object to or restrict how we use it, receive it in a portable format, and withdraw your consent at any time (this doesn’t affect anything we did before you withdrew it). To exercise any of these rights, email hi@friedstudios.com. We’ll reply within one month.
If you’re unhappy with how we’ve handled your data, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es), or to the supervisory authority where you live. In Ireland, that’s the Data Protection Commission (dataprotection.ie). We’d appreciate the chance to sort it out with you first.
7. Keeping your data secure
We use reputable, access-controlled tools with two-factor authentication where available, and we only give access to people who need it to do the work.
8. Client work
Where we handle personal data on a client’s behalf as part of a project (for example, managing their email marketing lists or website), we act as their data processor and follow their instructions under a separate agreement. This policy covers data we control ourselves.
9. Changes to this policy
We’ll update this page if anything changes and show the new date at the top. If the changes are significant, we’ll make that clear on the site.